Number of false negatives: 0
Number of true positives: 305
Number of false positives: 177
| Filename | Line | Message | Classification |
|---|---|---|---|
| linux-3.11/Documentation/connector/ucon.c | 250 | Resource leak: out | True Positive |
| linux-3.11/Documentation/laptops/hpfall.c | 33 | Dangerous usage of 'devname' (strncpy doesn't always null-terminate it). | True Positive |
| linux-3.11/arch/arm64/kvm/sys_regs.c | 1020 | Uninitialized variable: clidr | True Positive |
| linux-3.11/arch/arm64/kvm/sys_regs.c | 1021 | Uninitialized struct member: clidr.val | True Positive |
| linux-3.11/arch/cris/arch-v32/drivers/sync_serial.c | 285 | Array 'ports[1]' accessed at index 1, which is out of bounds. | True Positive |
| linux-3.11/arch/ia64/hp/common/sba_iommu.c | 956 | Possible null pointer dereference: ioc | True Positive |
| linux-3.11/arch/ia64/hp/common/sba_iommu.c | 1003 | Possible null pointer dereference: ioc | True Positive |
| linux-3.11/arch/ia64/hp/common/sba_iommu.c | 1502 | Possible null pointer dereference: ioc | True Positive |
| linux-3.11/arch/ia64/kernel/palinfo.c | 133 | Array 'units[5]' accessed at index 6, which is out of bounds. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: ''. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_CRAMFS;CONFIG_MTD_UCLINUX'. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_DEBUG_FS'. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_DEBUG_FS;CONFIG_MMU'. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_DUMMY_CONSOLE;CONFIG_VT'. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_EARLY_PRINTK'. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_MTD_UCLINUX'. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_MTD_UCLINUX;CONFIG_ROMFS_FS'. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_VT'. | True Positive |
| linux-3.11/arch/microblaze/kernel/setup.c | 180 | Invalid number of character (() when these macros are defined: 'CONFIG_VT;CONFIG_XILINX_CONSOLE'. | True Positive |
| linux-3.11/arch/mips/ralink/prom.c | 64 | Uninitialized variable: argc | True Positive |
| linux-3.11/arch/mips/txx9/generic/pci.c | 334 | Array 'regs[2]' accessed at index 2, which is out of bounds. | True Positive |
| linux-3.11/arch/mn10300/boot/tools/build.c | 54 | va_list 'args' was opened but not closed by va_end(). | True Positive |
| linux-3.11/arch/powerpc/kernel/prom_init.c | 391 | va_list 'args' was opened but not closed by va_end(). | True Positive |
| linux-3.11/arch/powerpc/perf/power4-pmu.c | 506 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/arch/powerpc/perf/ppc970-pmu.c | 380 | Array 'pmcsel[8]' accessed at index 8, which is out of bounds. | True Positive |
| linux-3.11/arch/powerpc/platforms/powermac/bootx_init.c | 87 | va_list 'args' was opened but not closed by va_end(). | True Positive |
| linux-3.11/arch/um/drivers/net_user.c | 258 | va_list 'ap' was opened but not closed by va_end(). | True Positive |
| linux-3.11/arch/unicore32/kernel/early_printk.c | 48 | Uninitialized variable: keep_early | True Positive |
| linux-3.11/arch/x86/boot/compressed/mkpiggy.c | 61 | Resource leak: f | True Positive |
| linux-3.11/arch/x86/boot/tools/build.c | 135 | va_list 'args' was opened but not closed by va_end(). | True Positive |
| linux-3.11/arch/x86/kvm/x86.c | 5471 | Uninitialized variable: param | True Positive |
| linux-3.11/arch/x86/kvm/x86.c | 5472 | Uninitialized variable: param | True Positive |
| linux-3.11/arch/x86/kvm/x86.c | 5473 | Uninitialized variable: param | True Positive |
| linux-3.11/arch/x86/kvm/x86.c | 5474 | Uninitialized variable: param | True Positive |
| linux-3.11/arch/x86/math-emu/poly_2xm1.c | 127 | Uninitialized struct member: Denom.msw | True Positive |
| linux-3.11/arch/x86/math-emu/poly_2xm1.c | 73 | Uninitialized struct member: argSignif.msw | True Positive |
| linux-3.11/arch/x86/math-emu/poly_atan.c | 92 | Uninitialized variable: argSignif | True Positive |
| linux-3.11/arch/x86/math-emu/poly_l2.c | 205 | Uninitialized struct member: Numer.msw | True Positive |
| linux-3.11/arch/x86/math-emu/poly_l2.c | 194 | Uninitialized variable: argSignif | True Positive |
| linux-3.11/arch/x86/math-emu/poly_l2.c | 199 | Uninitialized variable: argSignif | True Positive |
| linux-3.11/arch/x86/math-emu/poly_l2.c | 218 | Uninitialized struct member: argSignif.lsw | True Positive |
| linux-3.11/arch/x86/math-emu/poly_l2.c | 219 | Uninitialized struct member: argSignif.midw | True Positive |
| linux-3.11/arch/x86/math-emu/poly_l2.c | 212 | Uninitialized struct member: argSignif.msw | True Positive |
| linux-3.11/arch/x86/math-emu/poly_sin.c | 352 | Uninitialized struct member: fix_up.msw | True Positive |
| linux-3.11/arch/x86/math-emu/poly_tan.c | 108 | Uninitialized struct member: accum.lsw | True Positive |
| linux-3.11/arch/x86/math-emu/poly_tan.c | 186 | Uninitialized struct member: fix_up.msw | True Positive |
| linux-3.11/arch/xtensa/platforms/iss/network.c | 115 | va_list 'ap' was opened but not closed by va_end(). | True Positive |
| linux-3.11/drivers/atm/fore200e.c | 2802 | Uninitialized variable: err | True Positive |
| linux-3.11/drivers/char/tile-srom.c | 156 | Uninitialized variable: dummy | True Positive |
| linux-3.11/drivers/clk/sunxi/clk-sunxi.c | 52 | Memory leak: fixed | True Positive |
| linux-3.11/drivers/clk/sunxi/clk-sunxi.c | 52 | Memory leak: gate | True Positive |
| linux-3.11/drivers/crypto/caam/caamhash.c | 822 | Uninitialized variable: desc | True Positive |
| linux-3.11/drivers/dma/mmp_tdma.c | 190 | Uninitialized variable: tdcr | True Positive |
| linux-3.11/drivers/dma/mmp_tdma.c | 231 | Uninitialized variable: tdcr | True Positive |
| linux-3.11/drivers/gpu/drm/gma500/mdfld_dsi_pkg_sender.c | 219 | Array 'dsi_errors[31]' accessed at index 31, which is out of bounds. | True Positive |
| linux-3.11/drivers/gpu/drm/i915/i915_gem.c | 986 | Possible null pointer dereference: ring | True Positive |
| linux-3.11/drivers/gpu/drm/qxl/qxl_draw.c | 352 | Uninitialized variable: drawable | True Positive |
| linux-3.11/drivers/gpu/drm/radeon/radeon_legacy_tv.c | 656 | Array 'YCOEF_value[5]' accessed at index 5, which is out of bounds. | True Positive |
| linux-3.11/drivers/gpu/drm/radeon/radeon_legacy_tv.c | 656 | Array 'YCOEF_EN_value[5]' accessed at index 5, which is out of bounds. | True Positive |
| linux-3.11/drivers/gpu/drm/radeon/radeon_legacy_tv.c | 652 | Array 'SLOPE_value[5]' accessed at index 5, which is out of bounds. | True Positive |
| linux-3.11/drivers/gpu/drm/radeon/radeon_legacy_tv.c | 653 | Array 'SLOPE_value[5]' accessed at index 5, which is out of bounds. | True Positive |
| linux-3.11/drivers/gpu/drm/radeon/radeon_legacy_tv.c | 657 | Array 'SLOPE_value[5]' accessed at index 5, which is out of bounds. | True Positive |
| linux-3.11/drivers/gpu/drm/radeon/radeon_legacy_tv.c | 660 | Array 'SLOPE_value[5]' accessed at index 5, which is out of bounds. | True Positive |
| linux-3.11/drivers/infiniband/hw/ipath/ipath_diag.c | 366 | Uninitialized struct member: dp.unit | True Positive |
| linux-3.11/drivers/input/touchscreen/ad7879-spi.c | 37 | Uninitialized variable: _rx_buf | True Positive |
| linux-3.11/drivers/isdn/mISDN/dsp_cmx.c | 1623 | Invalid number of character ({) when these macros are defined: 'DSP_NEVER_DEFINED'. | True Positive |
| linux-3.11/drivers/media/dvb-frontends/dib9000.c | 1047 | Array 'mb[10]' accessed at index 10, which is out of bounds. | True Positive |
| linux-3.11/drivers/media/dvb-frontends/ds3000.c | 619 | Array 'dvbs2_snr_tab[80]' accessed at index 80, which is out of bounds. | True Positive |
| linux-3.11/drivers/media/dvb-frontends/stv0367.c | 926 | Possible null pointer dereference: tuner_ops | True Positive |
| linux-3.11/drivers/media/i2c/ov9650.c | 710 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/media/i2c/ov9650.c | 711 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/media/i2c/ov9650.c | 725 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/media/pci/saa7134/saa7134-input.c | 136 | Uninitialized variable: b | True Positive |
| linux-3.11/drivers/media/usb/dvb-usb-v2/mxl111sf.c | 139 | Uninitialized variable: val | True Positive |
| linux-3.11/drivers/mfd/pm8921-core.c | 178 | Possible null pointer dereference: pmic | True Positive |
| linux-3.11/drivers/mfd/tps65911-comparator.c | 61 | Array 'tps_comparators[2]' accessed at index 2, which is out of bounds. | True Positive |
| linux-3.11/drivers/mfd/tps65911-comparator.c | 88 | Array 'tps_comparators[2]' accessed at index 2, which is out of bounds. | True Positive |
| linux-3.11/drivers/misc/lkdtm.c | 330 | Uninitialized variable: data | True Positive |
| linux-3.11/drivers/misc/sgi-xp/xpc_partition.c | 73 | Uninitialized variable: buf | True Positive |
| linux-3.11/drivers/misc/sgi-xp/xpc_sn2.c | 2173 | Uninitialized variable: msg | True Positive |
| linux-3.11/drivers/misc/sgi-xp/xpc_sn2.c | 2174 | Uninitialized variable: notify | True Positive |
| linux-3.11/drivers/mmc/host/sdhci-spear.c | 93 | Possible null pointer dereference: pdata | True Positive |
| linux-3.11/drivers/net/ethernet/emulex/benet/be_cmds.c | 1542 | Uninitialized variable: status | True Positive |
| linux-3.11/drivers/net/ethernet/i825xx/sun3_82586.c | 993 | Array 'p.xmit_cmds[1]' accessed at index 1, which is out of bounds. | True Positive |
| linux-3.11/drivers/net/ethernet/marvell/mvneta.c | 2779 | Uninitialized variable: phy_addr | True Positive |
| linux-3.11/drivers/net/ethernet/smsc/smc91x.c | 556 | Uninitialized variable: flags | True Positive |
| linux-3.11/drivers/net/fddi/skfp/ecm.c | 500 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/net/wireless/ath/ath9k/eeprom.c | 414 | Array 'data_9287[idxL].pwrPdg[4][1]' index data_9287[idxL].pwrPdg[0][4] out of bounds. | True Positive |
| linux-3.11/drivers/net/wireless/ath/ath9k/hw.c | 1280 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/net/wireless/ath/ath9k/hw.c | 1282 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1851 | Uninitialized variable: gains | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1853 | Uninitialized variable: gains | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1851 | Uninitialized struct member: gains.gm | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1853 | Uninitialized struct member: gains.gm | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1851 | Uninitialized struct member: gains.pga | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1853 | Uninitialized struct member: gains.pga | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1851 | Uninitialized struct member: gains.pad | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1853 | Uninitialized struct member: gains.pad | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1851 | Uninitialized struct member: gains.dac | True Positive |
| linux-3.11/drivers/net/wireless/b43/phy_lp.c | 1853 | Uninitialized struct member: gains.dac | True Positive |
| linux-3.11/drivers/net/wireless/brcm80211/brcmfmac/bcmsdh_sdmmc.c | 133 | Uninitialized variable: err_ret | True Positive |
| linux-3.11/drivers/net/wireless/libertas/cmd.c | 1129 | Uninitialized struct member: cmd.control | True Positive |
| linux-3.11/drivers/net/wireless/libertas/cmd.c | 1131 | Uninitialized struct member: cmd.control | True Positive |
| linux-3.11/drivers/net/wireless/rt2x00/rt2x00mac.c | 799 | Uninitialized struct member: setup.rx_chain_num | True Positive |
| linux-3.11/drivers/net/wireless/rt2x00/rt2x00mac.c | 799 | Uninitialized struct member: setup.tx_chain_num | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8188ee/trx.c | 321 | Uninitialized variable: packet_beacon | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 566 | Uninitialized variable: txpktbuf_bndy | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 570 | Uninitialized variable: txpktbuf_bndy | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 574 | Uninitialized variable: txpktbuf_bndy | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 575 | Uninitialized variable: txpktbuf_bndy | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 579 | Uninitialized variable: txpktbuf_bndy | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 591 | Uninitialized variable: txpktbuf_bndy | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 598 | Uninitialized variable: txpktbuf_bndy | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 560 | Uninitialized variable: value32 | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/hw.c | 559 | Uninitialized variable: value8 | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192de/phy.c | 217 | Uninitialized variable: dbi_direct | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192se/rf.c | 66 | Uninitialized variable: pwrbase0 | True Positive |
| linux-3.11/drivers/net/wireless/rtlwifi/rtl8192se/rf.c | 67 | Uninitialized variable: pwrbase0 | True Positive |
| linux-3.11/drivers/net/wireless/ti/wlcore/boot.c | 126 | Undefined behavior: Variable 'min_fw_str' is used as parameter and destination in s[n]printf(). | True Positive |
| linux-3.11/drivers/net/wireless/ti/wlcore/boot.c | 129 | Undefined behavior: Variable 'min_fw_str' is used as parameter and destination in s[n]printf(). | True Positive |
| linux-3.11/drivers/platform/x86/sony-laptop.c | 795 | Uninitialized variable: len | True Positive |
| linux-3.11/drivers/s390/char/con3215.c | 733 | Array 'raw3215[1]' accessed at index 1, which is out of bounds. | True Positive |
| linux-3.11/drivers/scsi/BusLogic.c | 699 | Uninitialized variable: adapter | True Positive |
| linux-3.11/drivers/scsi/aacraid/rx.c | 503 | Uninitialized variable: var | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11560 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11563 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11564 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11565 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11566 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11567 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11568 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11569 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11570 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11571 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11572 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11573 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11575 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11577 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11579 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11581 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11582 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11586 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11587 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11588 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11590 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11592 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11593 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11594 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11595 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11596 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11597 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11598 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11599 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11600 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11601 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11603 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11605 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11607 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11609 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11614 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11615 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11616 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11618 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11620 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11621 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11622 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11623 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11624 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11625 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11626 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11627 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11628 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11629 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11631 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11633 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11635 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11637 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11677 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11680 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11741 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11743 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11745 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11747 | Possible null pointer dereference: adv_dvc_varp | True Positive |
| linux-3.11/drivers/scsi/advansys.c | 11505 | Uninitialized variable: ret | True Positive |
| linux-3.11/drivers/scsi/eata_pio.c | 923 | Array 'reg_IRQ[16]' accessed at index 16, which is out of bounds. | True Positive |
| linux-3.11/drivers/scsi/pm8001/pm80xx_hwi.c | 811 | Uninitialized variable: ret | True Positive |
| linux-3.11/drivers/scsi/qla2xxx/qla_attr.c | 896 | Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf(). | True Positive |
| linux-3.11/drivers/spi/spi-dw.c | 659 | Memory leak: chip | True Positive |
| linux-3.11/drivers/staging/bcm/CmHost.c | 1294 | Array 'psfCSType.cCPacketClassificationRule.u8IPv6FlowLable[3]' accessed at index 3, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/bcm/CmHost.c | 1294 | Array 'psfCSType.cCPacketClassificationRule.u8IPv6FlowLable[3]' accessed at index 4, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/bcm/CmHost.c | 1294 | Array 'psfCSType.cCPacketClassificationRule.u8IPv6FlowLable[3]' accessed at index 5, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/comedi/drivers/ni_mio_common.c | 5044 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/staging/cxt1e1/comet.c | 441 | Array 'table[24][5]' index table[24][0] out of bounds. | True Positive |
| linux-3.11/drivers/staging/lustre/lustre/ptlrpc/pack_generic.c | 2462 | va_list 'args' was opened but not closed by va_end(). | True Positive |
| linux-3.11/drivers/staging/ozwpan/ozpd.c | 177 | Possible null pointer dereference: pd | True Positive |
| linux-3.11/drivers/staging/rtl8192u/ieee80211/aes.c | 311 | Array 'ctx.E[60]' accessed at index 60, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/rtl8192u/ieee80211/aes.c | 311 | Array 'ctx.E[60]' accessed at index 61, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/rtl8192u/ieee80211/aes.c | 311 | Array 'ctx.E[60]' accessed at index 62, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/rtl8192u/ieee80211/aes.c | 311 | Array 'ctx.E[60]' accessed at index 63, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/rtl8192u/r8192U_core.c | 4723 | Possible null pointer dereference: driver_info | True Positive |
| linux-3.11/drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 1830 | Memory leak: param | True Positive |
| linux-3.11/drivers/staging/rtl8712/rtl871x_mlme.c | 1296 | Memory leak: pcmd | True Positive |
| linux-3.11/drivers/staging/rtl8712/rtl871x_mlme.c | 1296 | Memory leak: psetkeyparm | True Positive |
| linux-3.11/drivers/staging/tidspbridge/pmgr/dspapi.c | 363 | Uninitialized variable: num_nodes | True Positive |
| linux-3.11/drivers/staging/tidspbridge/pmgr/dspapi.c | 396 | Uninitialized variable: num_procs | True Positive |
| linux-3.11/drivers/staging/tidspbridge/pmgr/dspapi.c | 503 | Uninitialized variable: index | True Positive |
| linux-3.11/drivers/staging/tidspbridge/pmgr/dspapi.c | 1787 | Uninitialized variable: mask | True Positive |
| linux-3.11/drivers/staging/usbip/userspace/libsrc/names.c | 179 | Memory leak: p | True Positive |
| linux-3.11/drivers/staging/usbip/userspace/libsrc/usbip_host_driver.c | 130 | Common realloc mistake: 'edev' nulled but not freed upon failure | True Positive |
| linux-3.11/drivers/staging/vt6656/bssdb.c | 596 | Division by zero. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 286 | Array 'pVBInfo.CR40[3]' accessed at index 11, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 289 | Array 'pVBInfo.CR40[3]' accessed at index 12, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 292 | Array 'pVBInfo.CR40[3]' accessed at index 13, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 306 | Array 'pVBInfo.CR40[3]' accessed at index 11, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 310 | Array 'pVBInfo.CR40[3]' accessed at index 12, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 314 | Array 'pVBInfo.CR40[3]' accessed at index 13, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 325 | Array 'pVBInfo.CR40[3]' accessed at index 13, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 338 | Array 'pVBInfo.CR40[3]' accessed at index 12, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 342 | Array 'pVBInfo.CR40[3]' accessed at index 11, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 367 | Array 'pVBInfo.CR40[3]' accessed at index 13, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 375 | Array 'pVBInfo.CR40[3]' accessed at index 12, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 378 | Array 'pVBInfo.CR40[3]' accessed at index 11, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 411 | Array 'pVBInfo.CR40[3]' accessed at index 8, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 412 | Array 'pVBInfo.CR40[3]' accessed at index 5, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 413 | Array 'pVBInfo.CR40[3]' accessed at index 6, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 414 | Array 'pVBInfo.CR40[3]' accessed at index 7, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 433 | Array 'pVBInfo.CR40[3]' accessed at index 9, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 436 | Array 'pVBInfo.CR40[3]' accessed at index 10, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 447 | Array 'pVBInfo.CR40[3]' accessed at index 3, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 463 | Array 'pVBInfo.CR40[3]' accessed at index 20, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 467 | Array 'pVBInfo.CR40[3]' accessed at index 23, which is out of bounds. | True Positive |
| linux-3.11/drivers/staging/xgifb/vb_init.c | 478 | Array 'pVBInfo.CR40[3]' accessed at index 4, which is out of bounds. | True Positive |
| linux-3.11/drivers/tty/serial/msm_serial.c | 818 | Uninitialized variable: baud | True Positive |
| linux-3.11/drivers/tty/serial/vt8500_serial.c | 564 | Uninitialized variable: port | True Positive |
| linux-3.11/drivers/tty/sysrq.c | 139 | Possible null pointer dereference: killer | True Positive |
| linux-3.11/drivers/usb/atm/cxacru.c | 1111 | Uninitialized variable: bp | True Positive |
| linux-3.11/drivers/usb/atm/usbatm.c | 1382 | Undefined behavior: Variable 'buffer' is used as parameter and destination in s[n]printf(). | True Positive |
| linux-3.11/drivers/usb/class/usbtmc.c | 808 | Uninitialized variable: actual | True Positive |
| linux-3.11/drivers/usb/gadget/mv_u3d_core.c | 315 | Memory leak: trb | True Positive |
| linux-3.11/drivers/usb/gadget/mv_u3d_core.c | 459 | Memory leak: trb | True Positive |
| linux-3.11/drivers/usb/serial/mos7840.c | 1373 | Uninitialized variable: mos7840_port | True Positive |
| linux-3.11/drivers/usb/serial/mos7840.c | 1375 | Uninitialized variable: mos7840_port | True Positive |
| linux-3.11/drivers/usb/serial/mos7840.c | 1395 | Uninitialized variable: mos7840_port | True Positive |
| linux-3.11/drivers/video/aty/mach64_ct.c | 180 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/video/aty/mach64_ct.c | 183 | Shifting by a negative value is undefined behaviour | True Positive |
| linux-3.11/drivers/video/broadsheetfb.c | 673 | Memory leak: sector_buffer | True Positive |
| linux-3.11/drivers/video/cyber2000fb.c | 1962 | Uninitialized variable: err | True Positive |
| linux-3.11/drivers/video/sis/init301.c | 5717 | Division by zero. | True Positive |
| linux-3.11/fs/fuse/file.c | 2058 | Possible null pointer dereference: pages | True Positive |
| linux-3.11/fs/jfs/jfs_txnmgr.c | 1933 | Uninitialized variable: pxd | True Positive |
| linux-3.11/fs/jfs/jfs_txnmgr.c | 1933 | Uninitialized struct member: pxd.len | True Positive |
| linux-3.11/fs/jfs/jfs_txnmgr.c | 1933 | Uninitialized struct member: pxd.addr1 | True Positive |
| linux-3.11/fs/jfs/jfs_txnmgr.c | 1933 | Uninitialized struct member: pxd.addr2 | True Positive |
| linux-3.11/fs/xfs/xfs_dir2_node.c | 492 | Uninitialized variable: highstale | True Positive |
| linux-3.11/fs/xfs/xfs_dir2_node.c | 491 | Uninitialized variable: lowstale | True Positive |
| linux-3.11/kernel/posix-timers.c | 382 | Uninitialized variable: __timr | True Positive |
| linux-3.11/kernel/posix-timers.c | 776 | Uninitialized variable: __timr | True Positive |
| linux-3.11/kernel/posix-timers.c | 809 | Uninitialized variable: __timr | True Positive |
| linux-3.11/kernel/posix-timers.c | 892 | Uninitialized variable: __timr | True Positive |
| linux-3.11/kernel/posix-timers.c | 940 | Uninitialized variable: __timr | True Positive |
| linux-3.11/lib/argv_split.c | 92 | Memory leak: argv | True Positive |
| linux-3.11/net/ipv6/ip6_gre.c | 673 | Uninitialized variable: max_headroom | True Positive |
| linux-3.11/net/ipv6/netfilter/nf_conntrack_reasm.c | 422 | Uninitialized variable: head | True Positive |
| linux-3.11/net/ipv6/reassembly.c | 454 | Uninitialized variable: head | True Positive |
| linux-3.11/net/wireless/wext-sme.c | 351 | Possible null pointer dereference: ie | True Positive |
| linux-3.11/scripts/docproc.c | 394 | Common realloc mistake: 'data' nulled but not freed upon failure | True Positive |
| linux-3.11/scripts/docproc.c | 418 | Common realloc mistake: 'all_list' nulled but not freed upon failure | True Positive |
| linux-3.11/scripts/dtc/util.h | 34 | va_list 'ap' was opened but not closed by va_end(). | True Positive |
| linux-3.11/scripts/dtc/checks.c | 116 | va_list 'ap' was opened but not closed by va_end(). | True Positive |
| linux-3.11/scripts/dtc/fdtput.c | 99 | Common realloc mistake: 'value' nulled but not freed upon failure | True Positive |
| linux-3.11/scripts/dtc/util.c | 214 | Common realloc mistake: 'buf' nulled but not freed upon failure | True Positive |
| linux-3.11/scripts/genksyms/genksyms.c | 875 | Resource leak: dumpfile | True Positive |
| linux-3.11/scripts/kconfig/confdata.c | 62 | va_list 'ap' was opened but not closed by va_end(). | True Positive |
| linux-3.11/scripts/kconfig/nconf.gui.c | 375 | Common realloc mistake: 'result' nulled but not freed upon failure | True Positive |
| linux-3.11/scripts/kconfig/nconf.gui.c | 481 | Common realloc mistake: 'result' nulled but not freed upon failure | True Positive |
| linux-3.11/scripts/kconfig/symbol.c | 903 | Common realloc mistake: 'res' nulled but not freed upon failure | True Positive |
| linux-3.11/security/apparmor/match.c | 64 | Uninitialized struct member: th.td_hilen | True Positive |
| linux-3.11/security/apparmor/match.c | 64 | Uninitialized struct member: th.td_data | True Positive |
| linux-3.11/sound/oss/midi_synth.c | 51 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/midi_synth.c | 57 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/midi_synth.c | 61 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/midi_synth.c | 66 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/midi_synth.c | 70 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/midi_synth.c | 74 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/midi_synth.c | 79 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/mpu401.c | 1661 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/mpu401.c | 1672 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/mpu401.c | 1682 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/oss/mpu401.c | 1690 | Uninitialized variable: len | True Positive |
| linux-3.11/sound/pci/ice1712/wm8766.c | 256 | Uninitialized variable: val2 | True Positive |
| linux-3.11/sound/pci/ice1712/wm8776.c | 529 | Uninitialized variable: val2 | True Positive |
| linux-3.11/sound/soc/codecs/ad193x.c | 488 | Uninitialized variable: ret | True Positive |
| linux-3.11/sound/soc/codecs/tlv320aic23.c | 675 | Uninitialized variable: ret | True Positive |
| linux-3.11/sound/soc/nuc900/nuc900-ac97.c | 337 | Uninitialized variable: ret | True Positive |
| linux-3.11/sound/soc/txx9/txx9aclc-ac97.c | 190 | Uninitialized variable: drvdata | True Positive |
| linux-3.11/sound/soc/txx9/txx9aclc-ac97.c | 192 | Uninitialized variable: drvdata | True Positive |
| linux-3.11/tools/lib/traceevent/event-parse.c | 250 | Common realloc mistake: 'cmdlines' nulled but not freed upon failure | True Positive |
| linux-3.11/tools/perf/bench/sched-messaging.c | 335 | Memory leak: pth_tab | True Positive |
| linux-3.11/tools/perf/perf.c | 273 | Common realloc mistake: 'new_argv' nulled but not freed upon failure | True Positive |
| linux-3.11/tools/perf/tests/dso-data.c | 47 | Memory leak: buf | True Positive |
| linux-3.11/tools/perf/util/annotate.c | 680 | Memory leak: ppercents | True Positive |
| linux-3.11/tools/power/cpupower/bench/parse.c | 166 | Resource leak: configfile | True Positive |
| linux-3.11/tools/power/cpupower/bench/parse.c | 87 | Common realloc mistake: 'filename' nulled but not freed upon failure | True Positive |
| linux-3.11/tools/power/cpupower/utils/cpupower.c | 96 | Memory leak: page | True Positive |
| linux-3.11/tools/testing/selftests/timers/posix_timers.c | 155 | Uninitialized variable: err | True Positive |
| linux-3.11/arch/arm/mach-tegra/sleep.h | 97 | syntax error | False Positive |
| linux-3.11/arch/frv/kernel/time.c | 93 | Uninitialized variable: year | False Positive |
| linux-3.11/arch/frv/kernel/time.c | 93 | Uninitialized variable: mon | False Positive |
| linux-3.11/arch/frv/kernel/time.c | 93 | Uninitialized variable: day | False Positive |
| linux-3.11/arch/frv/kernel/time.c | 93 | Uninitialized variable: hour | False Positive |
| linux-3.11/arch/frv/kernel/time.c | 93 | Uninitialized variable: min | False Positive |
| linux-3.11/arch/frv/kernel/time.c | 93 | Uninitialized variable: sec | False Positive |
| linux-3.11/arch/ia64/hp/common/sba_iommu.c | 649 | Possible null pointer dereference: ioc | False Positive |
| linux-3.11/arch/ia64/hp/common/sba_iommu.c | 1144 | Possible null pointer dereference: ioc | False Positive |
| linux-3.11/arch/powerpc/kvm/book3s_32_mmu.c | 274 | Array 'pteg[16]' accessed at index 17, which is out of bounds. | False Positive |
| linux-3.11/arch/powerpc/kvm/book3s_32_mmu.c | 277 | Array 'pteg[16]' accessed at index 17, which is out of bounds. | False Positive |
| linux-3.11/arch/powerpc/kvm/book3s_64_mmu.c | 281 | Array 'pteg[16]' accessed at index 17, which is out of bounds. | False Positive |
| linux-3.11/arch/powerpc/kvm/book3s_64_mmu.c | 285 | Array 'pteg[16]' accessed at index 17, which is out of bounds. | False Positive |
| linux-3.11/arch/powerpc/kvm/e500_mmu.c | 364 | Array 'vcpu_e500.gtlb_nv[2]' accessed at index 2, which is out of bounds. | False Positive |
| linux-3.11/arch/powerpc/kvm/e500_mmu.c | 361 | Array 'vcpu_e500.gtlb_params[2]' accessed at index 2, which is out of bounds. | False Positive |
| linux-3.11/arch/powerpc/platforms/powermac/low_i2c.c | 1387 | Array 'inst.buffer[64]' accessed at index 9998, which is out of bounds. | False Positive |
| linux-3.11/arch/s390/kernel/ptrace.c | 99 | Memory leak: new.control | False Positive |
| linux-3.11/arch/sh/drivers/push-switch.c | 27 | syntax error | False Positive |
| linux-3.11/arch/sparc/kernel/pcic.c | 694 | Uninitialized variable: irq | False Positive |
| linux-3.11/arch/x86/kernel/machine_kexec_32.c | 115 | Possible null pointer dereference: pmd | False Positive |
| linux-3.11/drivers/block/rbd.c | 1616 | Possible null pointer dereference: rbd_dev | False Positive |
| linux-3.11/drivers/crypto/nx/nx-842.c | 1030 | Possible null pointer dereference: node | False Positive |
| linux-3.11/drivers/dma/mmp_pdma.c | 461 | Possible null pointer dereference: prev | False Positive |
| linux-3.11/drivers/gpu/drm/i915/i915_irq.c | 116 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/i915_irq.c | 132 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/i915_irq.c | 3037 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/i915_irq.c | 3248 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/i915_irq.c | 3487 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/i915_irq.c | 1918 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/intel_ddi.c | 989 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/intel_pm.c | 2459 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/intel_pm.c | 2461 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/gpu/drm/i915/intel_pm.c | 4423 | Uninitialized variable: pipe | False Positive |
| linux-3.11/drivers/iommu/dmar.c | 1019 | Uninitialized variable: sts | False Positive |
| linux-3.11/drivers/iommu/intel-iommu.c | 984 | Uninitialized variable: sts | False Positive |
| linux-3.11/drivers/iommu/intel-iommu.c | 1002 | Uninitialized variable: val | False Positive |
| linux-3.11/drivers/iommu/intel-iommu.c | 1226 | Uninitialized variable: sts | False Positive |
| linux-3.11/drivers/iommu/intel-iommu.c | 1243 | Uninitialized variable: sts | False Positive |
| linux-3.11/drivers/iommu/intel_irq_remapping.c | 419 | Uninitialized variable: sts | False Positive |
| linux-3.11/drivers/iommu/omap-iommu.c | 669 | Possible null pointer dereference: fn | False Positive |
| linux-3.11/drivers/isdn/gigaset/ev-layer.c | 475 | Array index -1 is out of bounds. | False Positive |
| linux-3.11/drivers/isdn/i4l/isdn_ttyfax.c | 329 | Uninitialized variable: c | False Positive |
| linux-3.11/drivers/md/dm-mpath.c | 1590 | Possible null pointer dereference: bdev | False Positive |
| linux-3.11/drivers/media/i2c/ir-kbd-i2c.c | 219 | Uninitialized variable: key | False Positive |
| linux-3.11/drivers/media/platform/vino.c | 3745 | Array 'vino_indycam_v4l2_controls[9]' accessed at index 9, which is out of bounds. | False Positive |
| linux-3.11/drivers/media/platform/vino.c | 3766 | Array 'vino_saa7191_v4l2_controls[9]' accessed at index 9, which is out of bounds. | False Positive |
| linux-3.11/drivers/misc/fsa9480.c | 254 | syntax error | False Positive |
| linux-3.11/drivers/net/bonding/bond_main.c | 4618 | Array 'arp_ip_target[16]' accessed at index 9998, which is out of bounds. | False Positive |
| linux-3.11/drivers/net/bonding/bond_main.c | 4619 | Array 'arp_ip_target[16]' accessed at index 9998, which is out of bounds. | False Positive |
| linux-3.11/drivers/net/can/sja1000/peak_pci.c | 690 | Possible null pointer dereference: chan | False Positive |
| linux-3.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_stats.c | 683 | Memory leak: diff.hi | False Positive |
| linux-3.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_stats.c | 683 | Memory leak: diff.lo | False Positive |
| linux-3.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_stats.c | 903 | Memory leak: diff.hi | False Positive |
| linux-3.11/drivers/net/ethernet/broadcom/bnx2x/bnx2x_stats.c | 903 | Memory leak: diff.lo | False Positive |
| linux-3.11/drivers/net/ethernet/dec/tulip/de4x5.c | 5011 | Array 'lp.phy[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/net/ethernet/dec/tulip/de4x5.c | 5012 | Array 'lp.phy[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/net/ethernet/dec/tulip/de4x5.c | 5013 | Array 'lp.phy[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/net/ethernet/dec/tulip/de4x5.c | 5014 | Array 'lp.phy[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/net/ethernet/dec/tulip/de4x5.c | 5015 | Array 'lp.phy[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/net/ethernet/emulex/benet/be_cmds.c | 363 | Uninitialized variable: compl | False Positive |
| linux-3.11/drivers/net/ethernet/intel/e1000/e1000_hw.c | 5617 | Uninitialized variable: phy_data | False Positive |
| linux-3.11/drivers/net/ethernet/intel/e1000/e1000_hw.c | 5664 | Uninitialized variable: phy_data | False Positive |
| linux-3.11/drivers/net/wireless/airo.c | 7646 | syntax error | False Positive |
| linux-3.11/drivers/net/wireless/ath/ath10k/pci.c | 816 | Memory leak: compl | False Positive |
| linux-3.11/drivers/net/wireless/orinoco/fw.c | 144 | Possible null pointer dereference: fw_entry | False Positive |
| linux-3.11/drivers/net/wireless/orinoco/fw.c | 303 | Possible null pointer dereference: fw_entry | False Positive |
| linux-3.11/drivers/net/wireless/orinoco/fw.c | 304 | Possible null pointer dereference: fw_entry | False Positive |
| linux-3.11/drivers/net/wireless/orinoco/fw.c | 322 | Possible null pointer dereference: fw_entry | False Positive |
| linux-3.11/drivers/net/wireless/orinoco/fw.c | 323 | Possible null pointer dereference: fw_entry | False Positive |
| linux-3.11/drivers/net/wireless/ti/wl18xx/debugfs.c | 118 | Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf(). | False Positive |
| linux-3.11/drivers/net/wireless/ti/wl18xx/debugfs.c | 142 | Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf(). | False Positive |
| linux-3.11/drivers/net/wireless/ti/wl18xx/debugfs.c | 144 | Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf(). | False Positive |
| linux-3.11/drivers/net/wireless/ti/wl18xx/debugfs.c | 165 | Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf(). | False Positive |
| linux-3.11/drivers/s390/block/scm_blk.c | 85 | Memory leak: aobrq | False Positive |
| linux-3.11/drivers/sbus/char/envctrl.c | 385 | Array 'pchild.chnl_array[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/sbus/char/envctrl.c | 388 | Array 'pchild.tblprop_array[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/sbus/char/envctrl.c | 390 | Array 'pchild.tblprop_array[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/sbus/char/envctrl.c | 391 | Array 'pchild.tblprop_array[8]' accessed at index 8, which is out of bounds. | False Positive |
| linux-3.11/drivers/scsi/FlashPoint.c | 5464 | Array 'FPT_BL_Card[8]' accessed at index 9, which is out of bounds. | False Positive |
| linux-3.11/drivers/scsi/aic7xxx/aicasm/aicasm_symbol.c | 649 | Possible null pointer dereference: tab_str | False Positive |
| linux-3.11/drivers/scsi/aic7xxx/aicasm/aicasm_symbol.c | 649 | Possible null pointer dereference: tab_str2 | False Positive |
| linux-3.11/drivers/scsi/be2iscsi/be_cmds.c | 412 | Uninitialized variable: compl | False Positive |
| linux-3.11/drivers/scsi/device_handler/scsi_dh.c | 417 | Possible null pointer dereference: scsi_dh | False Positive |
| linux-3.11/drivers/scsi/gdth.c | 730 | Array 'irq[16]' accessed at index 16, which is out of bounds. | False Positive |
| linux-3.11/drivers/scsi/gdth.c | 731 | Array 'irq[16]' accessed at index 16, which is out of bounds. | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_bsg.c | 3157 | Possible null pointer dereference: rsp | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_els.c | 3455 | Possible null pointer dereference: buf_ptr | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_init.c | 1103 | Possible null pointer dereference: buf_ptr | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_init.c | 3036 | Possible null pointer dereference: psb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_init.c | 3037 | Possible null pointer dereference: psb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_scsi.c | 1261 | Possible null pointer dereference: psb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_scsi.c | 1262 | Possible null pointer dereference: psb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_scsi.c | 1263 | Possible null pointer dereference: psb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_scsi.c | 1265 | Possible null pointer dereference: psb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_sli.c | 1129 | Possible null pointer dereference: piocb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_sli.c | 1894 | Possible null pointer dereference: hbq_buffer | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_sli.c | 9016 | Possible null pointer dereference: pmb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_sli.c | 9017 | Possible null pointer dereference: pmb | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_sli.c | 9155 | Possible null pointer dereference: buf_ptr | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_sli.c | 12094 | Possible null pointer dereference: dmabuf | False Positive |
| linux-3.11/drivers/scsi/lpfc/lpfc_sli.c | 16245 | Possible null pointer dereference: mb | False Positive |
| linux-3.11/drivers/scsi/mpt2sas/mpt2sas_ctl.c | 1045 | Buffer is accessed out of bounds. | False Positive |
| linux-3.11/drivers/scsi/mpt2sas/mpt2sas_ctl.c | 1046 | Buffer is accessed out of bounds. | False Positive |
| linux-3.11/drivers/scsi/mpt3sas/mpt3sas_ctl.c | 1038 | Buffer is accessed out of bounds. | False Positive |
| linux-3.11/drivers/scsi/mpt3sas/mpt3sas_ctl.c | 1039 | Buffer is accessed out of bounds. | False Positive |
| linux-3.11/drivers/staging/bcm/PHSModule.c | 904 | Array 'psServiceFlowTable.stSFList[17]' accessed at index 17, which is out of bounds. | False Positive |
| linux-3.11/drivers/staging/bcm/PHSModule.c | 909 | Array 'psServiceFlowTable.stSFList[17]' accessed at index 17, which is out of bounds. | False Positive |
| linux-3.11/drivers/staging/bcm/PHSModule.c | 910 | Array 'psServiceFlowTable.stSFList[17]' accessed at index 17, which is out of bounds. | False Positive |
| linux-3.11/drivers/staging/lustre/lnet/klnds/o2iblnd/o2iblnd_cb.c | 2256 | Possible null pointer dereference: net | False Positive |
| linux-3.11/drivers/staging/lustre/lnet/klnds/o2iblnd/o2iblnd_cb.c | 2269 | Possible null pointer dereference: net | False Positive |
| linux-3.11/drivers/staging/lustre/lustre/obdclass/cl_lock.c | 603 | Possible null pointer dereference: lock | False Positive |
| linux-3.11/drivers/staging/lustre/lustre/obdclass/cl_lock.c | 758 | Possible null pointer dereference: lock | False Positive |
| linux-3.11/drivers/staging/lustre/lustre/obdclass/cl_lock.c | 854 | Possible null pointer dereference: lock | False Positive |
| linux-3.11/drivers/staging/lustre/lustre/obdclass/cl_lock.c | 873 | Possible null pointer dereference: lock | False Positive |
| linux-3.11/drivers/staging/lustre/lustre/obdclass/cl_lock.c | 2171 | Possible null pointer dereference: lock | False Positive |
| linux-3.11/drivers/tty/isicom.c | 1581 | Possible null pointer dereference: board | False Positive |
| linux-3.11/drivers/tty/isicom.c | 1582 | Possible null pointer dereference: board | False Positive |
| linux-3.11/drivers/tty/isicom.c | 1583 | Possible null pointer dereference: board | False Positive |
| linux-3.11/drivers/tty/tty_io.c | 1450 | Possible null pointer dereference: driver | False Positive |
| linux-3.11/drivers/usb/core/file.c | 213 | Array 'usb_minors[256]' accessed at index 256, which is out of bounds. | False Positive |
| linux-3.11/drivers/usb/gadget/dummy_hcd.c | 277 | Uninitialized variable: ep | False Positive |
| linux-3.11/drivers/usb/gadget/f_fs.c | 1937 | Memory leak: d | False Positive |
| linux-3.11/drivers/usb/gadget/fsl_udc_core.c | 855 | Possible null pointer dereference: last_dtd | False Positive |
| linux-3.11/drivers/usb/gadget/fsl_udc_core.c | 856 | Possible null pointer dereference: last_dtd | False Positive |
| linux-3.11/drivers/usb/gadget/lpc32xx_udc.c | 557 | Uninitialized variable: ep | False Positive |
| linux-3.11/drivers/usb/gadget/mv_udc_core.c | 434 | Possible null pointer dereference: last_dtd | False Positive |
| linux-3.11/drivers/usb/gadget/mv_udc_core.c | 435 | Possible null pointer dereference: last_dtd | False Positive |
| linux-3.11/drivers/usb/gadget/omap_udc.c | 1359 | Uninitialized variable: ep | False Positive |
| linux-3.11/drivers/usb/gadget/u_serial.c | 1135 | Array 'ports[4]' accessed at index 4, which is out of bounds. | False Positive |
| linux-3.11/drivers/usb/gadget/u_serial.c | 1136 | Array 'ports[4]' accessed at index 4, which is out of bounds. | False Positive |
| linux-3.11/drivers/usb/musb/cppi_dma.c | 852 | Possible null pointer dereference: tail | False Positive |
| linux-3.11/drivers/usb/musb/cppi_dma.c | 853 | Possible null pointer dereference: tail | False Positive |
| linux-3.11/drivers/usb/serial/mos7840.c | 1472 | Array 'mos7840_port.busy[16]' accessed at index 16, which is out of bounds. | False Positive |
| linux-3.11/drivers/video/matrox/matroxfb_maven.c | 159 | Uninitialized variable: dst | False Positive |
| linux-3.11/drivers/video/sm501fb.c | 1768 | Possible null pointer dereference: pd | False Positive |
| linux-3.11/fs/adfs/dir.c | 63 | Deallocation of an auto-variable results in undefined behaviour. | False Positive |
| linux-3.11/fs/adfs/dir.c | 181 | Deallocation of an auto-variable results in undefined behaviour. | False Positive |
| linux-3.11/fs/adfs/dir.c | 97 | Deallocation of an auto-variable results in undefined behaviour. | False Positive |
| linux-3.11/fs/bio.c | 147 | Possible null pointer dereference: bslab | False Positive |
| linux-3.11/fs/btrfs/send.c | 1586 | Uninitialized struct member: found_key.objectid | False Positive |
| linux-3.11/fs/btrfs/send.c | 1587 | Uninitialized struct member: found_key.type | False Positive |
| linux-3.11/fs/cifs/connect.c | 3425 | Uninitialized variable: xid | False Positive |
| linux-3.11/fs/cifs/connect.c | 3422 | Uninitialized variable: ses | False Positive |
| linux-3.11/fs/cifs/connect.c | 3420 | Uninitialized variable: tcon | False Positive |
| linux-3.11/fs/exofs/ore.c | 199 | Memory leak: extra_part | False Positive |
| linux-3.11/fs/exofs/super.c | 570 | Memory leak: aoded | False Positive |
| linux-3.11/fs/nfsd/nfs4recover.c | 1079 | Null pointer dereference | False Positive |
| linux-3.11/fs/nfsd/nfs4recover.c | 1108 | Null pointer dereference | False Positive |
| linux-3.11/fs/ntfs/compress.c | 228 | Uninitialized variable: completed_pages | False Positive |
| linux-3.11/fs/ubifs/key.h | 542 | Signed integer overflow for expression '536870912)*4096' | False Positive |
| linux-3.11/fs/xfs/xfs_btree.c | 3297 | Array 'cur.bc_ptrs[8]' accessed at index 9998, which is out of bounds. | False Positive |
| linux-3.11/fs/xfs/xfs_dir2_node.c | 1502 | Possible null pointer dereference: bp | False Positive |
| linux-3.11/kernel/cgroup.c | 4908 | Uninitialized variable: ss | False Positive |
| linux-3.11/kernel/cgroup.c | 4933 | Uninitialized variable: ss | False Positive |
| linux-3.11/kernel/cgroup.c | 5340 | Uninitialized variable: ss | False Positive |
| linux-3.11/kernel/sched/rt.c | 607 | Uninitialized variable: iter | False Positive |
| linux-3.11/kernel/sched/rt.c | 688 | Uninitialized variable: iter | False Positive |
| linux-3.11/kernel/trace/ftrace.c | 184 | Boolean value assigned to pointer. | False Positive |
| linux-3.11/kernel/trace/ftrace.c | 4313 | Boolean value assigned to pointer. | False Positive |
| linux-3.11/kernel/trace/ftrace.c | 4346 | Boolean value assigned to pointer. | False Positive |
| linux-3.11/mm/frontswap.c | 335 | Possible null pointer dereference: si | False Positive |
| linux-3.11/mm/frontswap.c | 353 | Possible null pointer dereference: si | False Positive |
| linux-3.11/mm/mlock.c | 500 | Possible null pointer dereference: prev | False Positive |
| linux-3.11/mm/slab.c | 2709 | Uninitialized variable: slabp | False Positive |
| linux-3.11/net/ax25/ax25_dev.c | 37 | Uninitialized variable: ax25_dev | False Positive |
| linux-3.11/net/ax25/ax25_dev.c | 141 | Uninitialized variable: ax25_dev | False Positive |
| linux-3.11/net/ceph/mon_client.c | 65 | Possible null pointer dereference: m | False Positive |
| linux-3.11/net/core/skbuff.c | 2832 | Possible null pointer dereference: tail | False Positive |
| linux-3.11/net/ipv4/ipconfig.c | 276 | syntax error | False Positive |
| linux-3.11/net/sctp/sm_make_chunk.c | 1447 | Possible null pointer dereference: data | False Positive |
| linux-3.11/scripts/kconfig/confdata.c | 970 | Resource leak: tristate | False Positive |
| linux-3.11/sound/pci/pcxhr/pcxhr.c | 729 | Uninitialized struct member: pipe.first_audio | False Positive |
| linux-3.11/tools/hv/hv_kvp_daemon.c | 292 | Common realloc mistake: 'record' nulled but not freed upon failure | False Positive |
| linux-3.11/tools/hv/hv_kvp_daemon.c | 395 | Common realloc mistake: 'record' nulled but not freed upon failure | False Positive |
| linux-3.11/tools/perf/builtin-kmem.c | 370 | Uninitialized variable: map | False Positive |
| linux-3.11/tools/perf/builtin-kmem.c | 370 | Uninitialized struct member: map.unmap_ip | False Positive |
| linux-3.11/virt/kvm/kvm_main.c | 2305 | Possible null pointer dereference: ops | False Positive |